Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/ZkI0BKv7hf_ucyX53-0WeS2FZU0.roa
File: ZkI0BKv7hf_ucyX53-0WeS2FZU0.roa (raw, json)
Hash identifier: /W5mPhl5tNlOLzwA/Si8gsOL5g4fr6fls1AqWYZxDGY=
Subject key identifier: 66:42:34:04:AB:FB:85:FF:EE:73:25:F9:DF:ED:16:79:2D:85:65:4D
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 019F676DA47E6E25ADB86F77DBD46A32FFF9
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/ZkI0BKv7hf_ucyX53-0WeS2FZU0.roa
Signing time: Wed 15 Jul 2026 20:17:46 +0000
ROA not before: Wed 15 Jul 2026 20:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48095
IP address blocks: 185.234.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:6d:a4:7e:6e:25:ad:b8:6f:77:db:d4:6a:32:ff:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Jul 15 20:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66423404abfb85ffee7325f9dfed16792d85654d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:d6:c7:f9:7a:28:24:1f:cf:85:35:ee:4d:
fa:58:5d:34:c5:4a:94:b5:c1:c7:a5:7a:c3:cc:a6:
01:24:50:f3:c2:65:6b:33:75:bc:4d:3b:17:43:f2:
bf:5d:c7:1a:2a:95:fe:c5:47:93:cf:8c:c7:79:4f:
fc:95:61:ff:13:62:49:1c:84:fe:80:ac:c4:38:6b:
86:22:83:7d:6e:fb:93:f9:de:83:6a:2e:91:56:c4:
6c:80:33:c2:b6:5a:e1:55:6a:ad:9d:d6:72:8a:75:
39:a2:5d:fd:b2:6a:b1:63:d2:d2:2e:c4:27:13:5f:
e0:5f:7f:11:51:6b:6f:5a:b5:9d:03:27:ad:6d:89:
ea:bc:3b:c3:72:38:8f:1f:81:50:dc:56:5a:71:fc:
81:1a:20:5f:16:e6:b5:68:28:28:0d:46:42:55:aa:
08:dd:fa:16:60:34:05:b2:92:7c:f5:81:dd:84:40:
e7:4c:cf:1e:72:07:b1:e0:fd:0c:35:36:1a:07:67:
89:88:2f:6c:e2:cc:0d:ac:34:22:fe:0b:85:90:e2:
84:9e:18:3c:f8:0c:04:15:53:24:93:e4:f2:4e:c1:
44:6d:60:d4:ed:35:44:d7:2c:bb:25:a9:2a:34:55:
11:ed:91:22:e4:68:33:f1:a7:ee:3e:1e:52:5f:a4:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:42:34:04:AB:FB:85:FF:EE:73:25:F9:DF:ED:16:79:2D:85:65:4D
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/ZkI0BKv7hf_ucyX53-0WeS2FZU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:1f:85:51:a4:92:ae:8b:6f:57:46:b6:6b:41:03:16:67:02:
a3:42:25:59:84:1c:80:eb:e3:4f:76:96:8b:b5:e5:0f:4b:48:
2d:54:c8:e3:15:ce:d9:93:00:c6:93:b3:36:7b:6e:25:a0:99:
21:80:7c:65:b4:a6:71:2f:50:79:0e:26:93:e1:6d:04:1b:63:
14:b4:9b:62:31:23:15:0f:83:0a:d0:9d:22:ef:ca:ae:33:d5:
d2:17:64:cd:f9:61:49:4a:e8:07:25:66:65:04:ac:99:9f:ca:
e1:05:ea:4e:70:43:1b:1d:09:d9:84:bc:2d:5d:b9:fb:5c:5a:
8a:a9:d3:e5:cc:8e:00:45:14:22:c3:dc:de:09:6f:5a:2b:ed:
b3:43:6b:72:bd:82:9c:61:b4:97:74:e2:ce:ac:2c:f2:28:38:
5b:2e:38:ed:96:b1:bf:e2:8a:6d:00:a0:f5:8e:61:64:7f:32:
70:fc:7e:cf:28:be:88:46:a1:46:23:88:dd:6a:21:55:b0:b7:
b1:13:b0:bc:19:0d:3f:79:7d:2a:91:c8:96:cb:b5:1b:38:5d:
dc:70:69:aa:0c:31:fc:a4:90:de:51:8c:52:4a:88:a4:4f:c4:
c7:85:9d:db:31:89:b5:e3:96:af:4a:a7:18:b4:ec:bc:19:6a:
89:fb:6d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:52 2026 by rpki-client